Director, Security Engineering & Operations

TL;DR

Director, Security Engineering & Operations (Security Engineering & Operations): Own and drive hirify.global’s technical security strategy across web and data products, the data fusion engine, and corporate security posture with an accent on secure-by-design, secure SDLC, and risk-ranked security engineering maturity. Focus on building SOC/SIEM capabilities, strengthening AppSec and data/AI security controls, and aligning engineering leadership around measurable security processes and incident response excellence.

Company

hirify.global provides European B2B data and sales intelligence used by revenue teams to discover and engage qualified decision-makers.

What you will do

• Define and own the technical security strategy embedding secure-by-design across web/data products, data fusion, pipelines, and corporate environment.
• Set secure SDLC direction, including threat modeling, security in CI/CD, and iterative vulnerability management improvements.
• Strengthen data and AI security across the full data stack (ingestion to warehouse) with access governance, data classification, and secrets management.
• Own detection and response outcomes by partnering with a 24/7 outsourced SOC, maintaining SIEM, and building internal escalation and incident response playbooks.
• Lead and mentor application and infrastructure security engineers, shaping a security culture that enables developers to own remediations.
• Drive alignment across engineering, product, IT, and CISO leadership to deliver a long-term security engineering maturity roadmap.

Requirements

• Proven experience building security programmes from scratch or significantly transforming them in a product-led, engineering-first environment.
• Track record influencing engineering culture and earning trust, plus experience managing external security partners (e.g., 24/7 SOC and penetration testing providers).
• Strong AppSec foundation (OWASP, API security, SAST/DAST, SDLC) with practical threat modeling experience.
• Hands-on understanding of data security, cloud data warehouses, and pipeline integrity.
• Cloud security fluency, including container/Kubernetes security and IAM design, with ability to prioritize and challenge security tooling and implementations.
• Working knowledge of AI/LLM security risks to assess integrations, define guardrails, and evolve the programme.

Culture & Benefits

• Security is embedded in day-to-day ways of working, with a culture that prioritizes the securest path.
• Focus on measurable security processes and pragmatic guardrails that protect unacceptable risk without stifling innovation.
• Mentorship and team ownership with clear KPIs and engineering trust.
• Inclusive workplace values emphasizing ownership, customer understanding, and celebrating impact.

Hiring process

• Interview steps and evaluations are not specified in the provided posting.

Location: London